8849 matches found
Moderate: Red Hat Security Advisory: Openshift Logging Bug Fix and security update Release (5.3.10)
Openshift Logging Bug Fix Release 5.3.10 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
Use-After-Free
samba is vulnerable to use-after-free. The vulnerability exists because the AD DC database audit logging module can access LDAP message values freed by a preceding database module which allows an attacker to cause a memory corruption which then leads to an application crash...
Nextcloud 安全漏洞
Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in the Nextcloud server that stems from not properly logging federated sharing events...
Nextcloud 日志信息泄露漏洞
Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A log message disclosure vulnerability exists in Nextcloud Mail that originates from logging user passwords to disk...
PT-2022-20542 · Nextcloud · Nextcloud Mail
Name of the Vulnerable Software and Affected Versions: Nextcloud Mail versions prior to 1.12.1 Description: The issue affects Nextcloud Mail, an email application for the Nextcloud personal cloud product. In the event of a misconfiguration, affected versions of Nextcloud Mail would log user...
SUSE: Security Advisory (SUSE-SU-2022:2659-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Analyzing Attack Data and Trends Targeting Log4J
The Log4j vulnerability, initially reported in November 2021, has affected millions of devices and applications around the world. It has the potential to allow a malicious actor to take full control of vulnerable devices. As a result of how Log4j controls the logging of strings and code, the...
Australian Hacker Charged with Creating, Selling Spyware to Cyber Criminals
A 24-year-old Australian national has been charged for his purported role in the creation and sale of spyware for use by domestic violence perpetrators and child sex offenders. Jacob Wayne John Keen, who currently resides at Frankston, Melbourne, is said to have created the remote access trojan R...
[SECURITY] Fedora 36 Update: golang-github-hashicorp-hclog-0.15.0-6.fc36
Go-hclog is a package for Go that provides a simple key/value logging interfa ce for use in development and production environments...
Malicious Npm Packages Tapped Again to Target Discord Users
Threat actors once again are using the node package manager npm repository to hide malware that can steal Discord tokens to monitor user sessions and steal data on the popular chat and collaboration platform, researchers have found. A campaign discovered this week by Kaspersky researchers is hidi...
1405-authtokens (>=1.0.1 <=1.0.5), 1405_logging (=1.0.0) +3986 more potentially affected by CVE-2022-2564 via mongoose (>=1.0.0 <=5.13.14)
mongoose NPM version =1.0.0, =1.0.1, =1.0.7, =0.0.1, =0.0.2, =0.3.0, =0.0.1, =0.17.6, =0.0.1, =1.0.16, =1.0.30, =3.7.0, =3.8.2 and more Source cves: CVE-2022-2564 Source advisory: OSV:GHSA-F825-F98C-GJ3G...
EulerOS 2.0 SP10 : cifs-utils (EulerOS-SA-2022-2152)
According to the versions of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers...
Nextcloud: Exception logging in Sharepoint app reveals clear-text connection details
Summary: On Exceptions thrown in the context of the SharePoint app, connection credentials may be written to the Nextcloud log in clear text. Steps To Reproduce: Attempt to configure a sharepoint mount in an erroneous way. Supporting Material/References: was files publically:...
CVE-2022-32746
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...
CVE-2022-32746
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...
Samba 资源管理错误漏洞
Samba is the standard Windows interoperability program suite for Linux and Unix. A resource management error vulnerability exists in versions of Samba prior to 4.16.4, which stems from the AD DC Database Audit Logging module being able to access the value of an LDAP message that has been released...
Apache Apereo CAS Log4Shell Direct Check (CVE-2021-44228)
Binary data apacheapereocaslog4shell.nbin...
The vulnerability of the Red Database database management system lies in the insufficient maintenance of audit logs, which allows attackers to bypass the event recording mechanism.
The vulnerability of the Red Database database management system is related to insufficient logging of audit events. Exploiting this vulnerability allows an attacker to bypass the security event logging mechanism...
CVE-2022-2394
CVE-2022-2394 affects Puppet Bolt prior to 3.24.0. The vulnerability results from Bolt printing sensitive parameters during planning/runs, which may be logged when executed programmatically (e.g., via Puppet Enterprise). Affected versions include Bolt before 3.24.0; the issue is an information di...
